Legal
Privacy Policy
How we handle your personal data
Last updated: August 2026
We take the protection of your personal data seriously. This policy explains what data we process when you visit apphighway.com, contact us, or use one of our Shopify apps, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for data processing on this website is: Andre Prochiner Eichenweg 34b 9581 Ledenitzen, Austria Email: support@apphighway.com
2. Hosting & Server Logs
When you visit this website, our hosting provider automatically processes technical data that your browser transmits: IP address, date and time of the request, requested page, browser type and version, and operating system. This data is required to deliver the website reliably and securely (legal basis: Art. 6(1)(f) GDPR — legitimate interest) and is not merged with other data sources.
3. Analytics
We use a privacy-preserving, first-party page-view measurement to understand how our website is used — only if you agreed to it in the cookie notice (legal basis: Art. 6(1)(a) GDPR, § 165(3) Austrian TKG 2021). We record the visited page, referrer, truncated technical metadata and a pseudonymous session identifier; IP addresses are shortened before storage and never used to identify you. We do not use third-party advertising or cross-site tracking, and no data is shared with ad networks. You can withdraw your consent at any time with effect for the future via “Cookie settings & withdrawal” in the footer; the session cookie is deleted when you do.
4. Contact Form & Email
If you contact us via the contact form or email, we process the data you provide (name, email address, company if given, and your message) to handle your request (legal basis: Art. 6(1)(b) and (f) GDPR). We keep this correspondence for as long as necessary to process your request and to comply with statutory retention obligations.
5. Shopify Apps
When a merchant installs one of our Shopify apps, we process store data via the Shopify API strictly to provide the app's functionality (legal basis: Art. 6(1)(b) GDPR — performance of contract). The exact data scope depends on the app and is described in the app's Shopify App Store listing and documentation. We honour Shopify's mandatory GDPR webhooks: when a merchant or customer requests deletion, the related data is deleted. We do not sell merchant or customer data, and we do not use it for advertising.
6. Cookies & Local Storage
Set without consent because they are technically necessary: the language cookie (NEXT_LOCALE, 12 months), your theme preference (local storage) and the cookie that stores your cookie decision (ah_consent, 6 months). Only with your consent do we set a pseudonymous session cookie for our first-party page-view measurement (session_id, 30 days). We do not set advertising or third-party tracking cookies. You can change or withdraw your selection at any time via “Cookie settings & withdrawal” in the footer.
7. Recipients & Third Countries
We share data only with service providers that we need to operate the website and our apps (e.g. hosting and database providers), under data processing agreements pursuant to Art. 28 GDPR. Where providers process data outside the EU/EEA, we ensure appropriate safeguards such as EU standard contractual clauses.
9. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future — for cookies and measurement directly via “Cookie settings & withdrawal” in the footer of every page. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at).
10. Changes to this Policy
We may update this privacy policy when our services or legal requirements change. The current version is always available on this page.